DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c988013f6423f7dd5a65c2400a2fb740_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c988013f6423f7dd5a65c2400a2fb740_JaffaCakes118
Size
2.0MB
MD5
c988013f6423f7dd5a65c2400a2fb740
SHA1
a60dcf8b1557cbe6bafa839e196ca427ff399d74
SHA256
14786305c0c0dcdbf4bf1c214c34fa8ef4f6eab8a1e92dbc565298cb44d19b84
SHA512
ec84aec8f8fa822f3392321204e9d82932e34fe8047f39900734a7fe7debd1e59514fde67e197ca639022f8861d2d8a097b48dbc4e505e0e6f675326fe980c29
SSDEEP
49152:iuJyQ3RAAFKYEoyHOHqpTttf+eT62BuqHm6OEi:VhAAFKYEoB4tJ3B
Checks for missing Authenticode signature.
resource |
---|
c988013f6423f7dd5a65c2400a2fb740_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetProcessHeap
SetEndOfFile
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
WideCharToMultiByte
DeleteCriticalSection
FreeLibrary
LoadLibraryW
GetStringTypeW
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetDriveTypeW
FindFirstFileExW
GetCPInfo
GetTimeFormatW
GetDateFormatW
LCMapStringW
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile
GetModuleFileNameW
GetLocaleInfoW
GetFullPathNameA
CloseHandle
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetFullPathNameW
CreateFileW
IsWindow
CoMarshalInterThreadInterfaceInStream
CoUnmarshalInterface
SysFreeString
SysAllocString
VariantClear
VariantInit
SysStringLen
UrlMkSetSessionOption
SHGetFileInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ